Prototype Pollution

deep-get-set is vulnerable to prototype pollution. The vulnerability exists due to an incomplete fix of CVE-2020-7715, allowing an attacker to get control of value of “deep” and modify attributes such as proto, constructor and prototype...

curl 资源管理错误漏洞

curl is a tool for transferring data from or to a server. A resource management error vulnerability exists in curl versions 7.71.0 through 7.83.1, which stems from curl's lack of a limit on the size of the Set-Cookie in generated HTTP requests. An attacker could exploit this vulnerability to...

CVE-2022-32205

A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl 7.84.0 stores all of them. A sufficiently large amount of big cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger th...

UBUNTU-CVE-2022-32205

A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl 7.84.0 stores all of them. A sufficiently large amount of big cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger th...

PT-2022-21151

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.84.0 Description A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl. This can cause subsequent HTTP requests to become larger than the internal threshold of 1048576 bytes,...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: OSV:GHSA-MJJJ-6P43-VHHV...

Prototype Pollution in deep-get-set

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

GHSA-MJJJ-6P43-VHHV Prototype Pollution in deep-get-set

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

Design/Logic Flaw

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

CVE-2022-21231 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

CVE-2022-21231

CVE-2022-21231 affects the deep-get-set package; all versions are vulnerable to prototype pollution via the deep function. The vulnerability stems from an incomplete fix of CVE-2020-7715. The available references describe the issue as a prototype pollution risk that could allow modification of Ob...

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

deep-get-set 安全漏洞

deep-get-set is used to set and obtain values on objects via dotted strings. deep-get-set package in all versions suffers from a prototype pollution vulnerability that stems from the vulnerability of products to uncontrolled modification of object prototype properties. An attacker could exploit...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

None None...

MAL-2022-7053 Malicious code in wbtc-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a29f028b12bcfc56fb614b602c2a87e6aa9759e8cb9367ee05967ab3d8f696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wbtc-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a29f028b12bcfc56fb614b602c2a87e6aa9759e8cb9367ee05967ab3d8f696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in renvm-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4669c4c1e6ec4101a891fc9f75f45987efdaf0edf12f004c56a448b8a20f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5750 Malicious code in renvm-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4669c4c1e6ec4101a891fc9f75f45987efdaf0edf12f004c56a448b8a20f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dlt-daemon 资源管理错误漏洞

The dlt-daemon is the DLT communication interface for GENIVI's ECU. It collects and buffers log messages from one or more DLT users running on the ECU and makes them available to DLT clients upon request. A security vulnerability exists in dlt-daemon version v2.18.8, which stems from the fact tha...